NetSight
medium4.3

CVE-2020-25025

Incorrect Authorization in TYPO3 extension

Impact

The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).

Affected packages

EcosystemPackageAffectedFixed in
composerlocalizationteam/l10nmgr< 7.4.07.4.0

Affected products

VendorProductAffected versions
Localization Manager ProjectLocalization Manager
before 7.4.0
from 8.0.0 before 8.7.0
from 9.0.0 before 9.2.0

Weakness classification

References